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Protecting Content from Illicit Reproduction by Proof of Existence 
of a Complete Data Set using Security Identifiers 
BACKGROUND OF THE INVENTION 

1. Field of the Invention 

5 This invention relates primarily to the field of consumer electronics, and in particular to 

the protection of copy-protected content material. 

2. Description of Related Art 

The illicit distribution of copyright material deprives the holder of the copyright legitimate 
royalties for this material, and could provide the supplier of this illicitly distributed material with 
10 gains that encourage continued illicit distributions. In light of the ease of information transfer 
provided by the Internet, content material that is intended to be copy-protected, such as artistic 
renderings or other material having limited distribution rights, are susceptible to wide-scale illicit 
5l distribution. The MP3 format for storing and transmitting compressed audio files has made the 

91 wide-scale distribution of audio recordings feasible, because a 30 or 40 megabyte digital audio 

W 

& 1 5 recording of a song can be compressed into a 3 or 4 megabyte MP3 file. Using a typical 56 kbps 
dial-up connection to the Internet, this MP3 file can be downloaded to a user's computer in a few 

=-';:i 

ui minutes. Thus, a malicious party could read songs from an original and legitimate CD, encode the 
songs into MP3 format, and place the MP3 encoded song on the Internet for wide-scale 
illegitimate distribution. Alternatively, the malicious party could provide a direct dial-in service for 
20 downloading the MP3 encoded song. The illicit copy of the MP3 encoded song can be 

subsequently rendered by software or hardware devices, or can be decompressed and stored onto 
a recordable CD for playback on a conventional CD player. 

A number of schemes have been proposed for limiting the reproduction of copy-protected 
content material. The Secure Digital Music Initiative (SDMI) and others advocate the use of 
25 "digital watermarks" to identify authorized content material. EP 0981901 "Embedding auxiliary 
data in a signal" issued 1 March 2000 to Antonius A.C.M. Kalker, discloses a technique for 
watermarking electronic material, and is incorporated by reference herein. As in its paper 
watermark counterpart, a digital watermark is embedded in the content material so as to be 
detectable, but unobtrusive. An audio playback of a digital music recording containing a 
30 watermark, for example, will be substantially indistinguishable from a playback of the same 
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recording without the watermark. A watermark detection device, however, is able to distinguish 
these two recordings based on the presence or absence of the watermark. Because some content 
material may not be copy-protected and hence may not contain a watermark, the absence of a 
watermark cannot be used to distinguish legitimate from illegitimate material. On the contrary, the 
5 absence of a watermark is indicative of content material that can be legitimately copied freely. 
Other copy protection schemes are also available. For example, European patent 
EP0906700, "Method and system for transferring content information and supplemental 
information related thereto", issued 7 April 1999 to Johan P.M.G., presents a technique for the 
protection of copyright material via the use of a watermark "ticket" that controls the number of 
10 times the protected material may be rendered, and is incorporated by reference herein. 

An accurate reproduction of watermarked material will cause the watermark to be 
reproduced in the copy of the watermarked material. An inaccurate, or lossy reproduction of 
watermarked material, however, may not provide a reproduction of the watermark in the lossy 
01 copy of the material. A number of protection schemes, including those of the SDMI, have taken 
gi 15 advantage of this characteristic of lossy reproduction to distinguish legitimate material from 
% illegitimate material, based on the presence or absence of an appropriate watermark. In the SDMI 
U1 scenario, two types of watermarks are defined: "robust" watermarks, and "fragile" watermarks. A 
Q robust watermark is one that is expected to survive a lossy reproduction that is designed to retain 

H r I 

St a substantial portion of the original content material, such as an MP3 encoding of an audio 
CO 20 recording. That is, if the reproduction retains sufficient information to allow a reasonable 
p rendering of the original recording, the robust watermark will also be retained. A fragile 

watermark, on the other hand, is one that is expected to be corrupted by a lossy reproduction or 
other illicit tampering. 

In the SDMI scheme, the presence of a robust watermark indicates that the content 
25 material is copy protected, and the absence or corruption of a corresponding fragile watermark 
when a robust watermark is present indicates that the copy protected material has been tampered 
with in some manner. An SDMI compliant device is configured to refuse to render watermarked 
material with a corrupted watermark, or with a detected robust watermark but an absent fragile 
watermark, except if the corruption or absence of the watermark is justified by an "SDMI- 
30 certified" process, such as an SDMI compression of copy protected material for use on a portable 
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player. For ease of reference and understanding, the term "render" is used herein to include any 
processing or transferring of the content material, such as playing, recording, converting, 
validating, storing, loading, and the like. This scheme serves to limit the distribution of content 
material via MP3 or other compression techniques, but does not affect the distribution of 
counterfeit unaltered (uncompressed) reproductions of content material. This limited protection is 
deemed commercially viable, because the cost and inconvenience of downloading an extremely 
large file to obtain a song will tend to discourage the theft of uncompressed content material. 

BRIEF SUMMARY OF THE INVENTION 
It is an object of this invention to extend the protection of copy-protected material to 
include the protection of uncompressed content material. 

This object and others are achieved by selecting a sufficient number of data items for 
inclusion in a data set so as to discourage a transmission of the entire set over a limited bandwidth 
communications path, such as the Internet. The data set includes an entirety parameter that is used 
to determine whether the entirety of the data set is present. In a preferred embodiment, the 
entirety parameter is a hash value that is based on watermarks of each data item. When presented 
for rendering, the watermarks of the data items in the presented material are read and a hash value 
based on the presented watermarks is computed. A mis-match between the computed hash value 
and the entirety hash value contained in the data set indicates that less than the entirety of the data 
set is being presented, and the rendering is prohibited. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
The invention is explained in further detail, and by way of example, with reference to the 
accompanying drawings wherein: 

FIG. 1 illustrates an example system for protecting copy-protected content material in accordance 
5 with this invention. 

FIG. 2 illustrates an example data structure that facilitates a determination of the presence of an 
entirety of a data set in accordance with this invention. 

FIG. 3 illustrates an example flow diagram for an encoder that creates and records a data set and 
an entirety parameter corresponding to the data set in accordance with this invention. 
10 FIG. 4 illustrates an example flow diagram of a decoding system that renders content material in 
dependence upon a verification of the presence of an entirety of a data set in accordance with this 
invention. 

"l[ Throughout the drawings, the same reference numerals indicate similar or corresponding 

Ul features or functions. 

0115 

|! DETAILED DESCRIPTION OF THE INVENTION 

J I For ease of understanding, the invention is presented herein in the context of digitally 

p recorded songs. As will be evident to one of ordinary skill in the art, the invention is applicable to 

T. . S 

2 J any recorded information that is expected to be transmitted via a limited bandwidth 

2 20 communications path. For example, the individual content material items may be data records in a 

Q larger database, rather than songs of an album. 

The theft of an item can be discouraged by making the theft more time consuming or 
inconvenient than the worth of the stolen item. For example, a bolted-down safe is often used to 
protect small valuables, because the effort required to steal the safe will typically exceed the gain 
25 that can be expected by stealing the safe. Copending U.S. patent application "Protecting Content 
from Illicit Reproduction by Proof of Existence of a Complete Data Set", U.S. serial number 

, filed for Michael Epstein, Attorney Docket (disclosure 

709999B), teaches selecting and binding of data items to a data set that is sized sufficiently large 
so as to discourage a transmission of the data set via a bandwidth limited communications system, 
30 such as the Internet, and is incorporated by reference herein. This copending application teaches a 
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binding of the data items in the data set by creating a watermark that contains a data-set-entirety 
parameter and embedding this watermark into each section of each data item. The copending 
application also teaches including a section-specific parameter (a random number assigned to each 
section) in the watermark. 

As is known in the art, similar to the use of watermarks in currency, a watermarking 
system is premised on the assumption that a counterfeit watermark cannot easily be produced by 
an illegitimate manufacturer. As such, it can be expected that access to watermark- writing 
techniques will be restricted. Also, a number of other security systems, such as copy-limiting 
systems based on tickets, also rely on defined watermarks. The creation of a specific valued 
watermark for the security scheme of the copending application may be in conflict with the other 
security systems, or may consume more resources than is deemed worthwhile. 

In accordance with this invention, the entirety of the data set is verified using an entirety 
verification technique that does not require the creation of specific watermarks. An entirety 
parameter is created when the data set is created, based on a composite of security identifiers that 
are associated with each data item in the data set. The security identifier of each data item is 
configured such that a modification to the data item results in a modification of the security 
identifier. When the data set is presented for rendering, a corresponding security identifier for 
each data item is determined, based on the presented data item, and a corresponding entirety 
parameter is computed. If the computed entirety parameter does not match the entirety parameter 
associated with the data set, subsequent rendering of the presented data items is precluded. In the 
context of digital audio recordings, a compliant playback or recording device is configured to 
refuse to render an individual song in the absence of the entire contents of the CD. The time 
required to download an entire album on a CD in uncompressed digital form, even at DSL and 
cable modem speeds, can be expected to be greater than an hour, depending upon network 
loading and other factors. Thus, by requiring that the entire contents of the CD be present, at a 
download "cost" of over an hour, the likelihood of a theft of a song via a wide-scale distribution 
on the Internet is substantially reduced. 

As discussed above, a number of copy protection schemes have been proposed wherein 
copyright material, such as a song, is recorded with a substantially unique embedded watermark. 
In the context of such a copy protection scheme, a preferred embodiment of this invention uses 
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the embedded watermark of each song as the security identifier, assuming that the embedded 
watermark includes a fragile component that is altered if the associated content material is 
modified. As noted above, for example, existing SDMI security schemes rely on a fragile 
watermark that is altered if the song undergoes an MP3 compression. 

Alternative techniques may be used to determine or create a security identifier. In a non- 
watermark environment, for example, a checksum or other somewhat-unique identifier of the data 
item can be used as the security identifier, provided that the identifier is dependent upon the 
content of the data item. For additional security, a hash of the identifier may be used, to increase 
the difficulty of substituting a short data item that has the same security identifier as the original 
data item. For ease of reference, the invention is presented herein using the paradigm of a fragile 
watermark as the security identifier, although security identifiers comprising checksums, hash 
values, digital signatures, and the like, will be evident to one of ordinary skill in the art in view of 
this disclosure. 

FIG. 1 illustrates an example block diagram of a protection system 100 in accordance with 
this invention. The protection system 100 comprises an encoder 110 that encodes content material 
onto a medium 130, and a decoder 120 that renders the content material from the medium 130. 
The encoder 110 includes a selector 1 12 that selects content material from a source, and a 
recorder 1 14 that records this material onto the medium 130. The selector 1 12, for example, may 
be configured to select content information corresponding to songs that are being compiled into 
an album. The recorder 114 appropriately formats, encodes, and stores the information on the 
medium 130, using techniques common in the art. 

In accordance with this invention, the selector 1 12 selects data items to be added to the 
data set until the size of the data set is deemed large enough to discourage a subsequent 
transmission of the data set via a limited bandwidth communications channel. This "discouraging 
size" is a subjective value, and will depend upon the assumed available communications 
bandwidth, the loss incurred by the transmission, and so on. Other criteria may also be used to 
determine whether to add additional data items to the data set. For example, if the data items 
correspond to songs of an existing album collection, all of the songs will typically be added to the 
data set, regardless of whether the size of the data set has exceeded the determined discouraging 
size. If all of the songs of the album collection have been selected, and the discouraging size 
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criterion has not yet been reached, other data items are selected to accumulate the required 
discouraging size. For example, data items comprising random data bits may be added to the data 
set to increase its size. These random bits will typically be stored as out of band data, CD-ROM 
data, and the like, to prevent it from being rendered as audible sounds by a conventional CD 
5 player. Alternatively, the data items may comprise other sample songs that are provided to 

encourage the sale of other albums, or images and video sections related to the recorded content 
material. Similarly, promotional material, such as Internet access subscription programs may also 
be included in the recorded information on the recorded medium. These and other means of 
adding size to a data set will be evident to one of ordinary skill in the art in view of this invention. 
10 Additionally, one or more data items may be included in the data set specifically to enhance the 
security of this system, by introducing, for example, watermarks that are unrelated to the initial 
selection of data items comprising the data set. In accordance with this invention, an entirety 
y parameter is created based on each of the included data items in the data set. A removal or 
y J alteration of any of the data items, including any random sections, promotional material, and the 
m 15 like that were added to increase the size of the data set, or to improve the security of the entirety 
parameter, will result in a different corresponding entirety parameter, and can be used to preclude 
U ! the subsequent rendering of data items from a data set having a different entirety parameter. 

3 

Cj In accordance with this invention, the encoder 1 10 includes a binder 1 16 that determines 

jj{ an entirety parameter that acts to bind the parameter to each item selected by the selector 1 12 for 

CO 20 inclusion in the data set. In a preferred embodiment, the entirety parameter is a hash value that is 

O 

p based upon a composite of an entirety of the data. As discussed above, the entirety parameter is 
preferably based upon security identifiers associated with each data item in the data set, although 
the entirety parameter could be based on sub-divisions of each data item. That is, for example, in 
the context of digitally recorded songs, each section of the song may have a unique identifier, and 
25 the entirety parameter may be based on a composite of these section identifiers. Similarly, the 
entirety parameter may be a checksum that is based on each of the individual data units 
comprising each data item. For ease of reference, the term data item is used hereinafter to refer to 
the item to which the security identifier is associated, regardless of the structure of the contents of 
the data set. 
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In the context of audio recordings and consumer products, the use of a watermark as the 
security identifier is preferred, because rendering devices are often configured with numerous 
error masking techniques, and may not accurately reflect the true contents of the data items on the 
recording medium. For example, during playback a mis-read sector on a disc is often replaced by 
a prior sector, the priority being placed on providing a continuous flow of sound, rather that a 
discontinuous rendering of the exact sounds. In such an environment, a security identifier that is 
based on the presence of each and every bit in the data item may not be practical. Watermarks and 
watermark systems, on the other hand, are designed to provide an exact representation of the 
detected watermark, regardless of error masking or other effects that may affect the accuracy of 
the presented data. 

The decoder 120 in accordance with this invention comprises a renderer 122 and a gate 
124 that is controlled by an entirety checker 126. The renderer 122 is configured to retrieve 
information from a medium reading device, such as a CD reader 132. As is common in the art, the 
renderer 122 retrieves the information by specifying a location index, and in response, the reader 
132 provides the data located at the specified location index on the medium 130. Block reads of 
data at contiguous locations on the medium 130 are effected by specifying a location index and a 
block size. 

The dotted lines of FIG. 1 illustrate an example song extractor 142 that extracts a song 
from the medium 130 and communicates it to an example CD imitator 144, representative of a 
possible illicit download of the song via the Internet. The CD imitator 144 represents, for 
example, a software program that provides information in response to a conventional CD-read 
command. Alternatively, the information received from the song extractor can be written to a CD 
medium, and provided to the conventional CD reader 132. As noted above, the song extractor 
142 is likely to be used because the transmission of the entirety of the contents of the medium 130 
is assumed to be discouraged by the purposeful large size of the contents of the medium 130. 

In accordance with this invention, the entirety checker 126 is configured to obtain data 
from the medium 130, typically via the renderer 122, to determine whether the entire data set is 
present. The renderer 122 is configured to determine the watermark, or other security identifier, 
associated with data items that are read from the medium 130. The entirety checker 126 uses the 



709999A PATENT APPLICATION Page 8 of 24 



18 March 2000 




security identifier to determine whether the entirety of the data set is available to the Tenderer 122, 
as discussed below. 

FIG. 2 illustrates an example data structure 200 for storing data items in a data set that 
facilitates a determination of whether the entirety of the original data set is present, using the 
5 paradigm of a watermark being used as a security identifier. A track 210 and section 220 structure 
is illustrated, consistent with the memory structure of conventional CD and other storage media. 
In the example data structure 200, a watermark 230 that is associated with each track is 
embedded in each section 220. Track 0 has a watermark W0, track 1 has a watermark Wl, and so 
on. Alternative watermarking schemes are common in the art, including individual watermarks 
10 associated with each section 220. In the example of FIG. 2, a hash 240 of a composite of the 
watermarks W0, Wl, ... Wn is stored in the data structure 200, preferably as out of band data 
(OBD). This hash 240, for example, may be stored within the Table of Contents of a typical CD, 
as "CD-ROM" data in a mixed audio-data CD, as a separate and unique data section, as a false 
Ul song containing only data, and so on. Preferably, the watermarks include a combination of robust 

yj 

g\ 15 and fragile watermarks, such that a removal or alteration of the robust watermark causes damage 

'% to the corresponding data item, and an alteration of a data item causes damage to the 

Ul corresponding fragile watermark. 

s 

O Returning to FIG. 1, when the true or illicit copy of the content information is presented 

2 - s 

~t to the Tenderer 122, the entirety checker 126 receives each watermark, upon which the entirety 
G3 20 parameter is based, from the Tenderer 122. The entirety checker 126 computes an entirety value 
□ using the same algorithm that the encoder 1 10 used to create the entirety parameter. In the 

example of FIG. 2, the entirety value is a hash of the watermarks provided by the Tenderer, using 
the same hash function that is used to create the entirety parameter 240. The entirety checker 126 
receives the entirety parameter 240 from the Tenderer 122, and compares it to this computed hash 
25 of the provided watermarks. If the entirety parameter 240 and the computed hash do not match, 
the entirety checker 126 prevents the rendering of subsequent data items from the apparently illicit 
source, via the gate 124. 

In a preferred embodiment, the entirety parameter is also bound to the table of contents 
for the data set, because the entirety checker 126 uses the table of contents to determine the 
30 number of tracks, and the number of sections within each track. This binding serves to prevent a 
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substitution of a shortened data set comprising, for example, a single section per track. 
Alternatively, the size of a data set in accordance with this invention can be assumed to contain a 
specified minimum number of sections. Using this assumption, the entirety checker can be 
configured to prevent the rendering of the content material if the total number of sections included 
5 in a foreshortened table of contents does not amount to this specified minimum. 

Other security systems, not illustrated in FIG. 1, may also be employed to control the gate 
124, including those that rely on the value of the individual watermarks, such as the above 
referenced European patent EP983687A2, which uses of a watermark "ticket" that controls the 
number of times the protected material may be rendered. That is, by using existing or predefined 
10 watermarks, such as the aforementioned "ticket", to create the entirety parameter, the data 

structure in accordance with this invention is compatible with other systems that use or specify 
these watermarks. The example gate 124 is presented for ease of understanding. Any of a variety 
of techniques can be employed to prevent the rendering of material, including a direct control of 
y ] the Tenderer 122, a control of another device, such as a power supply to the renderer 122, and so 

M-l 

m 15 on. 

'13? s 

Depending upon the degree of security desired, relative to the time required to effect this 
Ul security, the composite of the watermarks may be based on fewer than all of the watermarks 
q available. For example, a set of entirety parameters may be defined, each entirety parameter 
5j r { corresponding to a predefined subset of the available watermarks. For example, a subset of 
CO 20 watermarks may comprise every other watermark, every third watermark, every watermark that is 
p not divisible by two, three, or seven, or any other collection of watermarks that can be commonly 
known among all compliant decoders. An algorithmically determined selection of members of 
each subset is preferred, so that a compliant decoder can determine the members of each subset of 
watermarks, regardless of the particular data set being presented. The decoder 120 in this example 
25 randomly picks one (or more) of the set of entirety parameters as the entirety parameter to verify, 
and performs the verification based on the subset of watermarks corresponding to the randomly 
selected entirety parameter. Even though each entirety parameter only verifies the presence of a 
subset of the data set, an illicit copy of the data set will need to contain the entirety of the data set, 
because the choice of which subset of watermarks will be verified is determined when the material 
30 is being rendered. An illicit copy of the data set comprising, for example, every other song of an 
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album, may be verified as being complete by some sets of watermarks, but would be found to be 
incomplete by other sets, such as a set of every third watermark in the original data set. In a 
preferred embodiment, the set of entirety parameters is defined such that each watermark is 
included in at least one corresponding subset of watermarks. To allow for an exhaustive 
verification, one of the entirety parameters in a preferred embodiment corresponds to the set of all 
watermarks. 

FIG. 3 illustrates an example flow diagram for an encoder 1 10 in accordance with this 
invention. The loop 310-335 creates a data set that contains a collection of data items, as 
discussed above. For each selected data item, a security item is created, at 320, except if, at 315, a 
security item already exists for this data item. For example, a digitally recorded song may include 
one or more watermarks that are embedded in the song, as discussed above. In the field of data 
processing, a checksum may be created for each data record. In the field of video, a parameter of 
a particular block, such as the low-order bits of an encoding of the block within each independent 
frame, may be used as a security item. Not illustrated, the value of the security item is temporarily 
stored, for use at step 352 to create one or more entirety parameters. As each data item is 
selected, the accumulated size of the data set is computed, at 330. Subsequent data items are 
accumulated into the data set until, at 335, the size is deemed sufficient to discourage a 
subsequent transmission via a limited bandwidth communication channel, as discussed above. 
Each section is stored on the medium, at 340, with its security identifier. 

The loop 350-359 creates and stores one or more entirety parameters on the medium, for 
use by a decoder to determine whether an entirety of the data set is present on a subsequent copy 
of some or all of the data items in the data set. As discussed above, to facilitate a rapid statistical 
verification that an entirety of the data is present, a set of entirety parameters are created, each 
entirety parameter of the entirety set corresponding to a subset of data items within the data set. 
Preferably, the subset of data items corresponding to each entirety parameter is algorithmically 
determinable, so that the correspondence is determinable at each decoder. Alternatively, a 
"membership list" that explicitly or algorithmically defines each entirety parameter's associated 
subset of data items, can be recorded on the medium. At 352, the entirety parameter 
corresponding to the appropriate subset of data items is created. In a preferred embodiment, this 
entirety parameter is a hash of the security identifiers of each data item in the subset of data items 
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associated with the entirety parameter. At 354, this entirety parameter is stored on the medium, 
preferably in a secure form, such as an embedded watermark, or an item that is bound to another 
item, such as a table of contents. 

FIG. 4 illustrates an example flow diagram for a decoder 120 in accordance with this 
5 invention. It is assumed that the process of FIG. 4 is invoked after it is determined that a 

requested data item, such as a song from a CD, is a member of a copy protected data set, via, for 
example, the presence of a watermark, an entry in the table of contents, and so on. At 410, an 
entirety parameter is selected from among the set of entirety parameters associated with the data 
set. If only one entirety parameter is available for selection, it is selected. The selected entirety 
10 parameter is read, at 420. As noted above, in the digital audio field, this entirety parameter is 

preferably a hash of a composite of the subset of watermarks associated with the selected entirety 
parameter: H'(W(e,l), W(e,2), . . . W(e,m)), where e is an index corresponding to the selected 
entirety parameter, m is the number of watermarks in the subset, and the prime (') annotation 
01 denotes a value read from the medium; if the material presented to the decoder is the original 
m 15 recording, the primed values and unprimed values are equal. At 430, each of the watermarks 
comprising the subset of watermarks associated with the selected entirety parameter is read 

J 

U S (W f (e, 1), W'(e,2), . . . W'(e,m)), and an entirety value is computed based on a composite of theses 
q watermarks H(W'(e,l), W'(e,2), . . . W'(e,m)), at 440, using the same process that was used to 

= - s 

S j generate the entirety parameter in the original recording. If, at 445, this computed entirety value is 
W 20 not equal to the read entirety parameter, implying a modification to the content material or the 
□ entirety parameter, the rendering of the song is precluded, at 490. If this computed entirety value 
corresponds to the read entirety value, another random entirety value may be selected and 
verified, via 455 to 410, until sufficient confidence is gained that the entirety of the data set is 
present. As noted above, in a preferred embodiment, one of the set of entirety parameters 
25 corresponds to a composite of all of the watermarks, and absolute confidence can be gained that 
the entirety of the data set is present by selected this entirety parameter at the first entry to block 
410. When, at 455, sufficient confidence is gained that the entirety of the data set is present in the 
material presented to be rendered, the selected data item of the data set is rendered, at 460. Other 
data structures based on different security identifier schemes would be processed in a manner 
30 appropriate to the particular scheme. 
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To minimize the delay introduced by the above verification scheme, assuming that the CD 
reader 132 can present information to the Tenderer 122 at greater than the speed required for 
rendering, the decoder 120 of FIG. 1 may be structured so as to initiate the rendering of the 
content material while the watermarks are being read, and then terminate the rendering as soon as 
5 it is determined that the computed entirety value does not match the corresponding stored entirety 
parameter. 

The foregoing merely illustrates the principles of the invention. It will thus be appreciated 
that those skilled in the art will be able to devise various arrangements which, although not 
explicitly described or shown herein, embody the principles of the invention and are thus within its 
10 spirit and scope. For example, the examples presented above illustrate each part of the recorded 
material being part of the data set. In an alternative embodiment, select data items, or select parts 
of data items, may be used to form the data set, for efficiency purposes. For example, the tail end 
Jj| of songs may not be part of the "data set" as defined herein, because the watermark process may 
fl be based on a fixed block-size for each watermark, or each redundant copy of the watermark. If, 
fli 15 for example, the watermark, or other parameter, requires ten seconds of a recording for a reliable 
J* embedding, the remainder of ((the song's length) modulo (10 seconds)) will be recorded on the 
^ medium, but not included in the "data set" whose entirety is being checked. In like manner, some 
O promotional material may be included on the recorded medium, but purposely excluded from the 
ij data set, so that it may be freely copied and rendered elsewhere. Note also that the example flow 

20 diagrams are presented for ease of understanding, and the particular arrangement and sequence of 
O steps are presented for illustration. For example, simple equalities are illustrated in the decision 

blocks for determining correspondence, whereas depending upon the particular techniques used to 
encode or decode the parameters, the assessment as to whether the read item corresponds to a 
determined item can include a variety of intermediate processes. These processes may include, for 
25 example, a decryption of items based on particular keys, fuzzy logic or statistical testing to 
determine if two values are "close enough" to imply a correspondence, and the like. Variations 
such as these and others will be evident to one of ordinary skill in the art in view of this invention, 
and are included in the spirit and scope of the following claims. 
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